Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/nSnGBSxQx-XqnmI1AfoD0Ijs9lc.roa
File: nSnGBSxQx-XqnmI1AfoD0Ijs9lc.roa (raw, json)
Hash identifier: r2Sq/D7pnEravM2oIBLxjMahxi0921ysQHVCJYPx8Lk=
Subject key identifier: 9D:29:C6:05:2C:50:C7:E5:EA:9E:62:35:01:FA:03:D0:88:EC:F6:57
Certificate issuer: /CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Certificate serial: 018A8E19CCF1C66FDEEE0C6DEF1245CEEF0E
Authority key identifier: 02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/nSnGBSxQx-XqnmI1AfoD0Ijs9lc.roa
Signing time: Wed 13 Sep 2023 10:32:50 +0000
ROA not before: Wed 13 Sep 2023 10:32:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25885
IP address blocks: 185.249.164.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:8e:19:cc:f1:c6:6f:de:ee:0c:6d:ef:12:45:ce:ef:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0203616ca2f9aefa70c3914cce90dce09706cfbb
Validity
Not Before: Sep 13 10:32:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9d29c6052c50c7e5ea9e623501fa03d088ecf657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c2:33:79:1f:de:95:8c:37:f3:f4:f7:36:20:
74:53:73:a8:b5:fa:c1:d5:07:99:6d:ff:11:9d:42:
af:0d:03:42:29:5e:14:5d:80:25:92:07:cf:ec:23:
69:58:51:ce:6b:94:63:2e:e1:d6:22:46:30:19:f3:
29:57:2a:83:77:ce:84:95:67:2d:cf:1c:e7:5e:96:
8a:e2:85:ba:c0:3e:11:7e:a6:39:e0:0a:cf:64:a1:
71:63:73:c3:39:64:86:fa:e5:43:12:82:f4:00:f7:
f1:80:4e:d8:66:a1:55:04:4e:5f:42:37:64:7c:84:
78:5e:36:f6:0c:ad:5c:5b:b4:53:9e:cc:c8:66:a0:
07:2e:34:49:a9:18:09:fe:95:11:1d:61:27:c1:9d:
b0:d5:80:5c:b6:5e:31:fa:a0:9c:40:65:f9:db:4f:
d1:c5:a6:a1:30:f1:06:e8:e2:d5:0b:43:cc:51:3a:
7d:69:d5:ea:e3:ad:cb:ec:5c:dd:44:78:f2:ad:89:
0a:ad:07:7c:53:cf:d7:d8:f0:23:17:1b:96:ce:ef:
82:8a:b9:87:e9:b7:d2:cc:33:ed:b3:94:6d:2d:71:
2b:fd:d1:48:78:52:b3:2b:df:e2:57:d6:c9:01:43:
43:47:76:33:f6:96:6b:82:97:2e:4b:c1:b4:a0:f6:
ed:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:29:C6:05:2C:50:C7:E5:EA:9E:62:35:01:FA:03:D0:88:EC:F6:57
X509v3 Authority Key Identifier:
keyid:02:03:61:6C:A2:F9:AE:FA:70:C3:91:4C:CE:90:DC:E0:97:06:CF:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AgNhbKL5rvpww5FMzpDc4JcGz7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/nSnGBSxQx-XqnmI1AfoD0Ijs9lc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/eb874a-892c-4c93-984a-c87ca9f2b95f/1/AgNhbKL5rvpww5FMzpDc4JcGz7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.164.0/22
Signature Algorithm: sha256WithRSAEncryption
03:30:d1:8d:11:47:f8:51:91:4f:56:e2:7d:20:3a:8d:fd:1e:
06:33:b2:8b:4b:16:93:25:18:85:72:66:60:65:07:f4:1c:ed:
a5:8a:27:9e:d7:9b:41:ee:33:03:45:f6:32:b5:ff:65:13:60:
e1:85:48:19:33:3f:5b:5d:9c:65:19:cd:9c:9b:ae:f3:9e:84:
97:ad:ee:41:03:3a:dd:a2:92:b7:e0:2b:86:93:02:d7:f4:9d:
00:ed:20:ab:aa:6a:5b:c1:34:f0:a1:6a:f4:f3:6d:c3:43:6b:
b0:d8:b5:7d:6e:c3:15:3d:34:2a:57:c2:66:5e:ea:96:4f:80:
75:8f:81:ed:8b:02:a1:1b:7d:2f:e5:43:80:a7:a4:79:25:dc:
b0:d2:06:b2:4f:23:fb:76:01:92:4d:67:f7:73:8f:29:d5:b5:
55:b1:4a:ca:1a:7f:b9:9d:74:48:65:3a:bf:90:d3:95:fe:22:
18:9e:b3:f3:e9:b1:11:c8:ce:6d:6c:1d:b3:2c:9b:55:3b:0d:
6f:56:09:f8:eb:1f:8a:48:1d:ef:2f:da:02:75:af:8d:50:ce:
53:b4:1c:c3:85:3a:71:ce:01:77:7f:68:e3:f6:64:2b:a7:95:
31:d8:88:c1:ef:0f:79:68:e7:48:aa:2f:e2:91:dd:c6:e1:e1:
e0:4f:f3:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:49:55 2024 by rpki-client on console-ams.rpki-client.org